Olliedawg

Theres some EOL for 365 apps on windows server 2019/2022 around that time too.

Has anyone ever run an in place upgrade on a Windows 10 client VM with Veeam B&R installed? Not sure how well SQL DB's cope with an in place upgrade? I would imagine best practice would be to spin up a new VM & restore the config file.

We're still running the last free version of ExamWritePad, in conjunction with Read&Write for additional features. Works well for us.

We had this too when our pastoral team all got work phones. Happened a few times when they first got the phones, then it stopped happening. I think we did add all of their numbers to their contacts, worth a try

This is how we do it with our Sophos XGS, maybe can do something similar on the Fortigate. We have two class sets of iPads. The iPads have DHCP reserved IP addresses. A separate firewall rule was made & applied to that address range, which forces captive portal before granting internet access. I had to add in another rule above that one for the same IP range to allow connection to MDM servers & MS servers to actually allow them to sign into the iPad prior to browsing the web.

Sounds like a good method, fingers crossed. We created new DC's in summer of 2023 & went from Server 2012 R2 > Server 2022. For me, Those local folders on the C:\ drive of the DC contain the same as \\domain.local\sysvol. I can't recall doing anything out of the ordinary when creating the new DC's.

Hmm ok Run "repadmin /showrepl" & "repadmin /replsummary" on the new DC to see last connection attempt to the other DC's Can also try "repadmin /syncall" to force a sync, and then check the local sysvol folder

How long have you waited? Worth running repadmin commands to check replication status if you haven't already, any errors etc..

Enjoy a well deserved break all! My last day at school today, (students and staff finished on Friday) Got a bit of maintenance to do, replacing 2 UPS, doing a office move & then I'm off until the 2nd

I thought so! I'd done some reading but wanted to ask the hivemind here too I would need either A3 or Intune P1

Someone please help me understand Microsoft licencing! Does what we have entitle us to use Intune device management, autopilot etc.. Each of our staff members have the following applied 365 A1 for Faculty/Student 365 Apps for Enterprise Entra ID P1 To manage staff access to email/office apps on their own devices we are still using the "Basic Mobility and Security" policy in the Purview portal (Overview of Basic Mobility and Security for Microsoft 365 - Microsoft 365 admin | Microsoft Learn). Our MDM Authority is set to Microsoft Office 365. However if what we have does entitle us I'd go ahead and swap over. Can't see anything in the UI to do the swap so I'm assuming we aren't entitled to Intune via P1.

Similar to above Usually start at 4GB/8GB depending on what the VM will be doing. If it needs more memory, then I allocate more. a DC shouldn't need more than 8 unless it's doing other things. Having excess memory never hurts, though.

Quite an old one but i've just started watching Dexter on Netflix. Loving it, been watching 1 - 2 episodes every night.

So far the policies i've created for testing with a dummy account are : Block logins from all countries besides UK Require MFA when not on school network (safe network) Seems to work well, however i'd like a way to get staff to register MFA from within the safe location too.

Morning all - not long now till Christmas break..! We've recently got Entra P1 & I'm having a play around with Conditional Access (all new to me). In mid/late January we are looking to roll out MFA to all staff. Just wondering what the best practices are, how you have gone about it. I've seen some setting their public IP as a safe location & not requiring MFA from there, then enforcing MFA from all other locations but this also blocks the initial registration if users are only logging in from the safe location.

PSA for Microsoft 365 Apps : Microsoft are pushing out auto migrations from Outlook "Classic" to Outlook "New" starting January 2025. There are registry keys/365 app policies you can put in place to disable the auto migration, along with hiding the "Try the new outlook" toggle. Outlook Classic will remain in support until 2029 Control installation and use of new Outlook - Microsoft 365 Apps | Microsoft Learn

SBB leased line here 1Gbps. Connection only no filtering. Haven't experienced any speed issues recently. Infact, haven't had any issues at all with our connection since early last year.

Haha, that desktop background is great

Use KeePassXC here. Database is protected via a long password & keyfile. Obviously different requirements mean different solutions, but we're a single school & i dont need to share the DB, so this works great for me.

Verbose is highly detailed messages - so you get details of the login process, what policies are applying etc.. on login instead of "Welcome.." Enable verbose startup, shutdown, logon, and logoff status messages in Windows Server 2003 - Windows Server | Microsoft Learn You can most likely use this to help pinpoint the policies which are causing the slowdown

Used to debloat with windows 10, haven't really bothered with windows 11. If you have applocker setup its easy enough to lock stuff down anyways

Exact same as above. Quite a few tweaks needed, but once it's done it works well. Using MDT here to deploy Win11 + install apps

Thanks all - new to me never really touched the google workspace stuff!

I tried that, however it just opens a window with a chat bot. Tried various times to get through to a live chat but failed. Just points me to articles when I describe my issue.

I put a firewall rule in above our captive portal rule, which allows the traffic to all required Mosyle domains/IP's before they sign in. Otherwise we have the same problem you face